Unable to configure EMC Isilon in ADAudit Plus

Unable to configure EMC Isilon in ADAudit Plus

In this article:

  • Issue description  

  • Prerequisites

  • Possible causes

  • Resolution

  • Related topics and articles

  • How to reach support

Issue description  

ADAudit Plus is unable to add the EMC Isilon cluster, preventing file activity monitoring and auditing. This issue may be caused by missing prerequisites, connectivity issues, or lack of necessary permissions.

Prerequisites  

  • ADAudit Plus can communicate with the EMC server(s).

  • The configured service account has the necessary permissions.

  • The computer object created in Active Directory has the operating system name OneFS.

Possible causes  

  • Cluster name is not displayed in the drop-down list: ADAudit Plus has not discovered the computer object from Active Directory.

  • Connection issues with the cluster: The cluster is unable to communicate due to blocked port 22, authentication failures, or incorrect DNS resolution.

  • The selected domain must be an authentication provider for the cluster: The domain selected in ADAudit Plus and the cluster attempting communication are not in the same domain.

  • Isilon zones not found: The ADAudit Plus Isilon user does not have permission to read the Isilon configuration.

  • Configured credentials are expired: The user account provided during cluster configuration has been updated or deleted.

  • No configured IP addresses for data reception: The system is not receiving any forwarded syslog data.

  • Access denied when retrieving shares: The configured user does not have permission to read the shares in the configured zone.

Resolution  

Step 1 Ensure the cluster name is displayed in the drop-down list  

  1. Log in to the ADAudit Plus web console.

  2. Navigate to the Domain Settings page.

  3. Click the domain drop-down and select Update domain objects.

  4. Select Computers and click Save.

  5. ADAudit Plus will verify the computer object associated with the domain-joined cluster and check if the operating system is OneFS.

Step 2 Resolve connection issues with the cluster  

  • If the cluster fails to connect due to a problem on port 22

  • Ensure port 22 is open on the ADAudit Plus server.

  • If authentication fails when connecting to the cluster

  • Verify credentials by using Putty (SSH) to connect to the cluster.

  • Ensure the cluster name points to the node IP address.

  • If the cluster is unable to communicate from this server

  • Ensure ADAudit Plus uses the cluster DNS name configured in Active Directory.

  • Confirm the cluster DNS name resolves correctly.

Step 3 Verify the selected domain as an authentication provider for the cluster  

  1. Check if the domain selected in ADAudit Plus and the cluster attempting communication belong to the same domain.

  2. Verify in the Isilon UI > Authentication Providers.

  3. Locate the cluster name in Active Directory by searching for it as a computer object.

Step 4 Verify Isilon zones  

  • Ensure the ADAudit Plus Isilon user has permission to read the Isilon configuration.

  • Verify that the minimum required permissions are assigned to the user.

Step 5 Update configured credentials  

  1. Navigate to File Audit > Configured Servers > EMC Isilon in the ADAudit Plus web console.

  2. Click the key icon to update credentials.

  3. Enter new credentials for the Isilon user and click OK.

Step 6 Refresh the interface IP address  

  1. Navigate to File Audit > Configured Servers > EMC Isilon in the ADAudit Plus web console.

  2. Click the refresh icon in the top-right corner.

Step 7 Resolve access denied issues when retrieving shares  

  1. Ensure the user configured under Domain Settings has permission to read the shares in the configured zone.

  2. To provide access:

  • Open the Isilon UI > Access > Membership and Roles.

  • Navigate to the Groups tab and select Providers with LOCAL System.

  • Edit the Administrators group and add the user configured under Domain Settings in ADAudit Plus.

Related topics and articles  

  • How to configure a service account for ADAudit Plus auditing

How to reach support  

If the issue persists, contact our support team here.

                  New to ADSelfService Plus?